[Bug 104579] crash in intel_miptree_create_for_dri_image due to invalid bo

[bugzilla-daemon at freedesktop.org]

https://bugs.freedesktop.org/show_bug.cgi?id=104579

--- Comment #1 from ubitux <freedesktop at pkh.me> ---
Since the trace was randomly changing, I added some debug in
intel_update_image_buffer(), and it looks like there is a memory corruption
happening in __DRIimageRec struct (intel one):

buffer=0x55fdda4e3f00
buffer->screen=0x55fdda4c2130
buffer->bo=0x1
buffer->pitch=0xda196040
buffer->internal_format=0x55fd
buffer->dri_format=0x00000004

bo is definitely a broken pointer, 0xda196040 is way too huge to be a valid
pitch (even interpreted as negative), 0x55fd doesn't look like a valid GL
internal format (previous calls are 0x1907 / GL_RGB), dri_format also got
changed from 0x1002. I didn't check any further in the struct to see where the
corruption starts, maybe I should?

-- 
You are receiving this mail because:
You are the QA Contact for the bug.
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/intel-3d-bugs/attachments/20180111/022b9584/attachment.html>